General

  • Target

    2023-08-25_424a3fbc3603184d4f954a3e9c077c7b_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    424a3fbc3603184d4f954a3e9c077c7b

  • SHA1

    aecb0064f825d4c2f57e9253813c61cfdd25df00

  • SHA256

    19832ed3c1c5f69ca87d4bdb787121b523ccfcca71bee43b744f591e654b8b70

  • SHA512

    5897ddeafe0b26631ccc3888fe1637448694f093d7425c0bff9afcfbc38a803a7e5af20be9d885959b65a3515850477c43ecd67c125f5289a3b58f2b254f2151

  • SSDEEP

    1536:5555555555555pmgSeGDjtQhnwmmB0yRMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r2:GMSjOnrmBpMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2023-08-25_424a3fbc3603184d4f954a3e9c077c7b_gandcrab_JC.exe
    .exe windows:5 windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections